Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier: /sgvNOLrt5fnk7HHZ1pyffvTlV4KlaAQ9lHxeC05eOk=
Subject key identifier: 00:AA:BF:17:53:C4:6F:39:10:17:F8:D5:31:AB:D3:FC:8D:BE:3C:8D
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 019873E31A35481627F46B43F78CD349285F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:59 +0000
Manifest this update: Mon 04 Aug 2025 07:01:59 +0000
Manifest next update: Tue 05 Aug 2025 07:01:59 +0000
Files and hashes: 1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: Mfb6SdRpM2BL5QgPsajteBf893kaDmFzVoPjyPJLfdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1a:35:48:16:27:f4:6b:43:f7:8c:d3:49:28:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Aug 4 07:01:59 2025 GMT
Not After : Aug 5 07:01:59 2025 GMT
Subject: CN=00aabf1753c46f391017f8d531abd3fc8dbe3c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:2e:f9:1d:09:a6:fd:82:78:37:30:e7:35:
23:24:41:c9:8f:ed:d1:6f:cf:da:c4:16:ba:0f:37:
0f:12:06:02:38:6a:d1:40:ab:59:5c:ed:d9:81:80:
6f:1e:dd:6c:16:33:47:99:5e:21:48:df:fc:33:54:
1b:a8:94:99:09:38:bf:5f:be:5c:65:63:d1:6c:23:
cb:ef:94:b6:9c:6c:f5:32:23:9a:d6:52:43:3a:70:
07:2f:e2:bb:4f:78:85:69:a1:42:e6:3e:93:92:6f:
fb:59:98:9b:98:70:17:f0:4a:bf:b9:6f:c2:52:07:
18:10:14:ab:ad:f8:8c:80:11:45:ce:40:f4:27:32:
c0:f1:c4:f5:fb:14:d2:66:2a:fe:6e:48:fa:9d:96:
95:7b:c8:f9:88:b5:77:f9:bf:ed:38:e4:99:b7:a3:
4d:12:23:e9:bc:6c:fb:58:b3:12:5e:85:5b:dd:12:
55:35:16:91:09:6f:4b:36:9d:55:ac:a6:96:78:06:
51:9a:a8:03:dc:40:bf:25:6b:7c:3f:af:bd:83:2f:
de:e3:e5:5d:be:94:08:94:66:79:dd:36:d9:c8:3e:
58:0a:36:5e:b2:80:90:5e:69:77:76:67:1f:66:5b:
c5:a8:16:d1:13:e9:8e:f7:4f:6a:f0:fd:f3:27:d8:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:BF:17:53:C4:6F:39:10:17:F8:D5:31:AB:D3:FC:8D:BE:3C:8D
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3a:8c:df:b1:c5:72:11:92:d2:25:3a:3c:7f:b5:36:2c:3e:
f4:cd:1b:96:18:63:2e:0c:d7:60:db:32:79:01:08:0c:79:a4:
a0:45:cd:76:3e:06:e7:1f:fa:4b:07:b1:34:82:39:45:3c:fb:
13:98:fb:f2:4f:10:c0:3f:26:70:1c:85:65:45:9b:b2:a5:ef:
d3:54:ba:26:7f:b1:0a:52:e9:93:c0:2f:b1:92:cb:19:a4:30:
f6:07:2c:89:2b:3b:c8:44:65:8a:5b:73:c1:57:bf:57:e5:9c:
84:3a:36:ea:f3:8e:fc:d1:26:29:36:58:37:0a:51:ab:cb:71:
fa:98:72:d0:c9:bf:65:21:35:cc:93:88:d2:40:d0:d0:dd:ab:
72:ed:5d:88:16:c9:76:68:a6:52:71:4b:e5:c9:69:83:38:d1:
97:35:d0:9a:37:df:5d:f5:1b:51:66:79:a1:49:2b:e5:26:b2:
61:8e:22:ca:39:f3:74:87:0d:92:91:ee:1d:87:09:bc:1f:5f:
43:56:2e:e1:2b:e9:7a:1a:c4:ef:81:0a:df:71:88:d5:a2:c2:
67:53:72:58:a8:6e:8b:a6:60:1e:2f:c1:8e:ed:49:42:38:16:
e3:55:5a:46:f6:7f:00:a6:3b:2d:64:81:00:a0:94:2e:67:be:
74:e2:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:07 2025 by rpki-client